CVE-2026-7660

Name of the Vulnerable Software and Affected Versions Easy Updates Manager versions prior to 9.0.21

Description Reflected Cross-Site Scripting occurs due to insufficient input sanitization and output escaping in the pagination() function. This allows attackers to inject arbitrary web scripts via the paged parameter, which execute when a user, such as an administrator, accesses a specially crafted link.

Recommendations Update Easy Updates Manager to version 9.0.21 or later. As a temporary workaround, restrict access to the functionality utilizing the paged parameter until the update is applied.